PT-2025-7981 · Linux+2 · Linux Kernel+2
Xiaoguang Wang
·
Published
2022-03-29
·
Updated
2025-11-18
·
CVE-2022-49053
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A issue in the Linux kernel has been identified where the
tcmu try get data page() function does not properly take a reference count on pages under cmdr lock, potentially leading to a page use-after-free (UAF) scenario. This can occur when tcmu blocks release() frees the page after tcmu try get data page() returns the page pointer. To prevent this, it is necessary to call get page() under cmdr lock to avoid concurrent tcmu blocks release() calls.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse